NordVPN Adopts the WireGuard Protocol on Linux

NordVPN introduced NordLynx technology, built around the WireGuard protocol. The technology combines WireGuard’s high-speed connection and NordVPN’s custom double Network Address Translation (NAT) system. WireGuard’s ability to secure users' privacy often comes up as a point for discussion, as it does not dynamically assign IP addresses to everyone connected to a server. Therefore, it’s required to store at least some user data on the server, compromising their privacy.

The double NAT system creates two local network interfaces for each user. The first interface assigns the same local IP address to all users connected to a server. Once the secure VPN tunnel is established, the second network interface with a dynamic NAT system kicks in. Dynamic local IP addresses remain assigned only while the session is active and doesn’t allow any identifiable data to be stored on the server.